EUVD-2025-5650

Malicious code in bioql PyPI...

EUVD-2025-30557

Malicious code in bioql PyPI...

EUVD-2025-9866

Malicious code in bioql PyPI...

EUVD-2025-27144

Malicious code in bioql PyPI...

EUVD-2025-3207

Malicious code in bioql PyPI...

EUVD-2025-27827

Malicious code in bioql PyPI...

EUVD-2024-0866

Malicious code in bioql PyPI...

EUVD-2022-3749

Malicious code in bioql PyPI...

EUVD-2025-23571

Malicious code in bioql PyPI...

EUVD-2024-54925

Malicious code in bioql PyPI...

EUVD-2023-41808

Malicious code in bioql PyPI...

PT-2025-39804

Name of the Vulnerable Software and Affected Versions YiFang CMS versions up to 2.0.2 Description A flaw exists in YiFang CMS that allows for unrestricted file uploads. This is due to manipulation of the uploadpath argument within the webUploader function located in the app/app/controller/File.ph...

CVE-2025-57972

Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through = 2.1.1...

CVE-2025-58234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Job Manager allows Stored XSS. This issue affects JS Job Manager: from n/a through 2.0.2...

CVE-2025-58234

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in JoomSky JS Job Manager js-jobs allows Stored XSS.This issue affects JS Job Manager: from n/a through = 2.0.2...

CVE-2025-57972

Missing Authorization vulnerability in WPFactory Helpdesk Support Ticket System for WooCommerce support-ticket-system-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Helpdesk Support Ticket System for WooCommerce: from n/a through = 2.1.1...

CVE-2025-57950

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Glen Scott Plugin Security Scanner plugin-security-scanner allows Stored XSS.This issue affects Plugin Security Scanner: from n/a through = 2.0.2...

CVE-2025-57906

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in epeken Epeken All Kurir epeken-all-kurir allows Stored XSS.This issue affects Epeken All Kurir: from n/a through = 2.0.6...

WordPress JS Job Manager Plugin <= 2.0.2 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin JS Job Manager versions = 2.0.2...

CVE-2025-57906

CVE-2025-57906 concerns the Epeken All Kurir WordPress/WooCommerce plugin. The connected document details a Stored Cross-Site Scripting (XSS) vulnerability in Epeken All Kurir Plugin for Woocommerce (Full Version) present in versions up to 2.0.6, with exploitation requiring authentication by a Sh...